Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/1-5yL_Q-nYPf2CLV3tjpWzClJnPw.roa
File: 1-5yL_Q-nYPf2CLV3tjpWzClJnPw.roa (raw, json)
Hash identifier: k8H40R+fMFH7wBdsLB91Y9l2eozFqsIfXqragAiM93E=
Subject key identifier: FB:9C:8B:FD:0F:A7:60:F7:F6:08:B5:77:B6:3A:56:CC:29:49:9C:FC
Certificate issuer: /CN=b753ac03945289e186bf29737b25618d3ccd4430
Certificate serial: 019F2368BE4070AF784C0127C4DAB2D44585
Authority key identifier: B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/1-5yL_Q-nYPf2CLV3tjpWzClJnPw.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41032
IP address blocks: 62.201.192.0/24 maxlen: 24
62.201.199.0/24 maxlen: 24
62.201.200.0/22 maxlen: 22
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
2a02:b60:1::/48 maxlen: 48
2a02:b60:2::/48 maxlen: 48
2a02:b60:3::/48 maxlen: 48
2a02:b60:4::/48 maxlen: 48
2a02:b60:5::/48 maxlen: 48
2a02:b60:6::/48 maxlen: 48
2a02:b60:7::/48 maxlen: 48
2a02:b60:8::/48 maxlen: 48
2a02:b60:9::/48 maxlen: 48
2a02:b60:a::/48 maxlen: 48
2a02:b60:b::/48 maxlen: 48
2a02:b60:c::/48 maxlen: 48
2a02:b60:d::/48 maxlen: 48
2a02:b60:e::/48 maxlen: 48
2a02:b60:f::/48 maxlen: 48
2a02:b60:10::/48 maxlen: 48
2a02:b60:11::/48 maxlen: 48
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:be:40:70:af:78:4c:01:27:c4:da:b2:d4:45:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b753ac03945289e186bf29737b25618d3ccd4430
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb9c8bfd0fa760f7f608b577b63a56cc29499cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:22:e3:94:1c:76:e4:b6:0f:b3:7c:2b:65:bc:
28:ab:1d:dd:7c:d5:e0:3b:f2:fb:4c:70:db:7d:fc:
cb:45:66:97:c6:e3:6b:17:f1:e1:26:32:3c:2b:20:
52:ea:b2:5f:3a:c7:7b:d5:7a:c6:53:0f:b2:bd:e0:
56:ec:28:2a:9d:06:c2:cf:2d:6b:b7:00:6f:87:8e:
84:2b:49:b2:14:74:00:b6:76:c9:54:9e:f6:49:11:
bf:87:26:6a:58:bd:6a:04:af:6c:dd:66:ea:52:8a:
32:e5:e2:86:41:bd:a2:c4:88:b8:ee:21:5f:81:ad:
32:18:b8:8e:28:30:4f:6b:60:a5:eb:54:df:6d:76:
8f:3c:4f:5d:88:cf:39:de:3b:e0:7d:51:e0:86:41:
19:34:29:54:95:82:ce:8c:95:69:cf:36:77:15:6f:
7d:42:4f:55:2c:d9:d8:8f:f1:e2:14:61:7b:13:30:
eb:11:77:0e:8d:fc:76:1b:bc:36:2e:99:ec:60:90:
9c:c3:64:a5:89:db:8e:40:12:13:cc:31:26:12:ae:
a9:76:29:c6:a8:6c:0f:0d:47:51:da:72:01:0b:97:
69:19:0d:29:ca:e1:cb:30:65:4e:6a:9f:85:1d:4e:
bf:05:16:ca:39:9b:4f:de:22:3b:a3:71:43:15:5b:
95:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9C:8B:FD:0F:A7:60:F7:F6:08:B5:77:B6:3A:56:CC:29:49:9C:FC
X509v3 Authority Key Identifier:
keyid:B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/1-5yL_Q-nYPf2CLV3tjpWzClJnPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.199.0-62.201.205.255
62.201.207.0-62.201.208.255
62.201.210.0/24
62.201.237.0/24
62.201.248.0/24
62.201.250.0/24
IPv6:
2a02:b60:1::-2a02:b60:11:ffff:ffff:ffff:ffff:ffff
2a02:b60:2000::/35
Signature Algorithm: sha256WithRSAEncryption
16:b6:d0:d0:59:8a:7a:14:d8:70:26:bb:6a:15:6d:89:36:98:
4e:e9:df:b4:b8:fd:fb:cf:ff:6e:6b:89:36:4b:3b:a6:2f:94:
28:51:28:25:bb:48:06:3b:cd:5a:31:d6:e8:9e:75:57:fb:8a:
c2:a0:7f:2c:c8:20:98:6a:19:2f:c5:01:a4:80:92:c5:d9:ae:
ae:20:5e:65:96:7c:37:b4:d0:10:d7:93:74:2b:56:03:ef:89:
2d:57:17:3c:9b:08:20:e0:ad:c9:0b:29:6f:85:e5:15:77:ea:
5b:e4:9f:c6:3a:52:b1:4c:36:48:80:98:a7:7b:06:e8:32:18:
b0:e5:f1:86:c8:e5:7f:68:36:16:dd:b8:c6:53:4c:23:bc:51:
b3:ff:36:e3:7b:6d:9d:f0:9c:d0:93:67:39:ba:2b:bc:a2:95:
29:7f:48:2c:af:bd:b6:36:b7:f4:11:c9:ce:e6:2c:b6:73:1e:
74:4f:0e:6b:15:20:49:ed:63:8c:1b:86:b9:97:c1:0f:05:4c:
cc:45:02:f8:87:3c:7c:c9:6d:67:1a:a2:73:9d:77:94:e8:5e:
89:57:eb:f3:5a:43:a9:58:71:c5:23:33:83:5a:f5:7e:f1:f6:
3f:1c:19:13:ee:e2:a4:86:5a:fa:c0:e6:e1:8f:22:db:1d:23:
57:a4:f3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:26 2026 by rpki-client